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Patent claims 

I. -8. (cancelled) 

9. (new) A method for restricting traffic in a packet-oriented 
network having a plurality of links, the method comprising: 

performing an authorization check relating to each link 
via which a group of data packets of a flow is transmitted over 
the network, wherein 

the group of data packets enters into the network at an 
ingress node, wherein 

the authorization check is performed by means of a limit 
value for the entire traffic which enters at the ingress node 
and is routed via the link. 

10. (new) The method in accordance with claim 9, wherein the 

transmission of the group of data packets is not authorized if 
the authorization of the transmission would lead to traffic on 
the link exceeding the limit value. 

II. (new) The method in accordance with claim 9, wherein 

two authorization checks relating to the link are 
performed, wherein 

a first authorization check corresponding to claim 9 is 
performed, wherein 

a second authorization check is performed in which 

an authorization check relating to the link is 
performed for the group of data packets, wherein 

the group of data packets leaves the network at an 
egress node, wherein 

the second authorization check is performed by means 
of a further limit value for the entire traffic which leaves 
the network via the egress node and is routed via the link, and 
wherein 
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the transmission of the group of data packets is not 
authorized if an authorization of the transmission would lead 
to traffic on the link exceeding either the limit value or the 
further limit value. 

12. (new) The method in accordance with claim 9, further 
comprising: 

performing a further authorization check, wherein 

the further authorization check is performed by means of 

limit value for the entire traffic of the flow routed via the 

ingress node, and wherein 

the transmission of the group of data packets is not 

authorized if authorizing the transmission would lead to 

traffic at the ingress node which would exceed the limit value 

13. (new) The method in accordance with claim 9, further 
comprising: 

performing a further authorization check, wherein 

the further authorization check is performed by means of 

limit value for the entire traffic of the flow routed via the 

egress node, and wherein 

the transmission of the group of data packets is not 

authorized if the authorization of the transmission would lead 

to traffic exceeding the limit value at the egress node. 

14. (new) The method in accordance with claim 9, further 
comprising : 

perfoirming a further authorization check, wherein 

the further authorization check is performed by means of 

limit value for traffic routed from the ingress node of the 

flow to the egress node, and wherein 

the transmission of the group of data packets is not 

authorized if authorization of the transmission would lead to 



2003P00715WOUS Substitute Specification.rtf 



PCT/EP2004/000218 / 2003P00715WOUS 

18 

traffic exceeding the limit value between the ingress node and 
the egress node. 

15. (new) A method for restricting traffic in a packet-oriented 
network having a plurality of links, the method comprising: 

performing an authorization check relating to a link for 
a group of data packets of a flow to be transmitted over the 
network, wherein 

the group of data packets leaves the network at an egress 
node, wherein 

the authorization check is performed by means of a limit 
value for the entire traffic which leaves the network via the 
egress node and is routed via the link. 

16. (new) The method in accordance with claim 15, wherein the 
transmission of the group of data packets is not authorized if 
the authorization of the transmission would lead to traffic 
exceeding the limit value on the link. 

17. (new) The method in accordance with claim 15, wherein 

two authorization checks relating to the link are 
performed, wherein 

a first authorization check corresponding to claim 15 is 
performed, wherein 

a second authorization check is performed in which for the 
group of data packets of the flow to be transmitted over the 
network an authorization check relating to the link is 
performed, wherein 

the group of data packets enters the network at an 
ingress node, 

the authorization check is performed by means of a 
further limit value for the entire traffic which enters at the 
ingress node and is routed via the link, and wherein 
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the transmission of the group of data packets is not 
authorized if an authorization of the transmission would lead 
to traffic on the link exceeding either the limit value or the 
further limit value. 

18. (new) The method in accordance with claim 15, wherein the 
method is performed for all links. 

19. (new) The method in accordance with claim 17, wherein the 
method is performed for all links. 

20. (new) The method in accordance with claim 15, further 
comprising: 

performing a further authorization check, wherein 

the further authorization check is performed by means of 

limit value for the entire traffic of the flow routed via the 

ingress node, and wherein 

the transmission of the group of data packets is not 

authorized if authorizing the transmission would lead to 

traffic at the ingress node which would exceed the limit value 

21. (new) The method in accordance with claim 15, further 
comprising: 

performing a further authorization check, wherein 

the further authorization check is performed by means of 

limit value for the entire traffic of the flow routed via the 

egress node, and wherein 

the transmission of the group of data packets is not 

authorized if the authorization of the transmission would lead 

to traffic exceeding the limit value at the egress node, 

22. (new) The method in accordance with claim 15, further 
comprising: 
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performing a further authorization check, wherein 

the further authorization check is performed by means of a 

limit value for traffic routed from the ingress node of the 

flow to the egress node, and wherein 

the transmission of the group of data packets is not 

authorized if authorization of the transmission would lead to 

traffic exceeding the limit value between the ingress node and 

the egress node. 

23. (new) A marginal node comprising means for executing a 
method in accordance with claim 15. 
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